Static task
static1
Behavioral task
behavioral1
Sample
5fa7e1a91dd500aacf1df9ee8f3192b99dee3cb1f29cd178d24c37ff2c875e5f.exe
Resource
win7-20240221-en
General
-
Target
5fa7e1a91dd500aacf1df9ee8f3192b99dee3cb1f29cd178d24c37ff2c875e5f
-
Size
2.0MB
-
MD5
b9d6cc23383de6ee869246a09e46c4ef
-
SHA1
691e328b8e439a00ffa2293dfdf785b6ca86be6d
-
SHA256
5fa7e1a91dd500aacf1df9ee8f3192b99dee3cb1f29cd178d24c37ff2c875e5f
-
SHA512
2667f48e2c811df87341e14787c2c4d29fd850128ca58bfda8aa0b32bc694bc502c1446aa8ac057399ba41e912c8d77e490b24bb06d099dae89c47c050c9600d
-
SSDEEP
49152:culUJ4TrI6e47iETCn06YKNXA3Sl7taeXqC6aAMJ:caa4PjpH6A3SHzEP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fa7e1a91dd500aacf1df9ee8f3192b99dee3cb1f29cd178d24c37ff2c875e5f
Files
-
5fa7e1a91dd500aacf1df9ee8f3192b99dee3cb1f29cd178d24c37ff2c875e5f.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 24KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnzcxnxo Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ihoepdrn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE